<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>Document</title>
</head>
<body>
  <h1>TEST CONTENT</h1>
  <div id='app'></div>
  <div id="root"></div>
  <script>
    function getData() {
      return `<img src='' onerror='alert(1)'  />`
    }
    setTimeout(() => {
      let textNode = document.createTextNode(getData());
      root.appendChild(textNode)
    }, 1000);
    setTimeout(() => {
      app.innerHTML = getData()
    }, 1000);
  </script>
</body>
</html>
